pm

type Executor interface {
	LookPath(file string) (string, error)
	ExecWithIO(ctx context.Context, name string, args []string, env []string, stdin io.Reader, stdout, stderr io.Writer) error
}

type ExitError struct {
	Code int
	Err  error
}

type PackageManager interface {
	// Name is the CLI noun and log key: "npm", "pip", "maven".
	Name() string
	// Binary is the executable looked up on PATH.
	Binary() string
	// Environment returns child-process env vars that route the manager's
	// HTTPS traffic through proxyURL. The parent env (with proxy vars
	// sanitized) is supplied by Run via proxyEnviron.
	Environment(proxyURL string) []string
	// CATrustEnviron returns the env vars that make the manager trust the
	// proxy's MITM CA at caPath (NODE_EXTRA_CA_CERTS, SSL_CERT_FILE,
	// PIP_CERT/REQUESTS_CA_BUNDLE, MAVEN_OPTS truststore, etc.).
	CATrustEnviron(caPath string) []string
	// ExistingBundleVars names every environment variable this manager's
	// CATrustEnviron overwrites that could hold a user's pre-existing CA
	// bundle (e.g. NODE_EXTRA_CA_CERTS, PIP_CERT and REQUESTS_CA_BUNDLE,
	// SSL_CERT_FILE and BUNDLE_SSL_CA_CERT), so the engine can prepend those
	// trust anchors to the proxy CA rather than replacing them. Every variable
	// CATrustEnviron sets must appear here, or a user who set only the
	// undeclared one loses their anchors and can no longer verify an internal
	// index/mirror. An empty slice means the manager has no such variable to
	// preserve (e.g. Maven, which trusts the proxy through a generated
	// truststore rather than an env-named bundle).
	ExistingBundleVars() []string
	// CleanupCAFiles removes any files this manager derived from the CA
	// bundle at caPath (for example a JVM truststore or a generated
	// settings.xml). The engine always removes caPath itself; this covers
	// ecosystem-specific sidecars the engine would otherwise not know about.
	CleanupCAFiles(caPath string)
	// Matcher returns the proxy coordinate matcher for this ecosystem's
	// upstream URL shape.
	Matcher() proxy.Matcher
}

type RunOptions struct {
	IO        *iostreams.IOStreams
	Executor  Executor
	BaseDir   string
	Client    *gitlab.Client // authenticated API client, for the policy checker
	ProjectID string         // project id or full-path slug, for policy scoping
	Args      []string
	// contains filtered or unexported fields
}